frida-detection icon indicating copy to clipboard operation
frida-detection copied to clipboard

Frida server not beeing detected

Open gabcarneiro opened this issue 4 years ago • 9 comments

I am running a frida-server(version 15.0.18) on a rooted device and both detection methods are not working.

Is anyone else facing this issue? Maybe the detection methods are outdated by now?

Please, help

gabcarneiro avatar Oct 05 '21 20:10 gabcarneiro

@gabcarneiro can you please upload built apk here , i not find any release on github

apkunpacker avatar Nov 22 '21 02:11 apkunpacker

@gabcarneiro

Are your rooted devices arm64?

FuentesFelipe avatar Dec 27 '21 18:12 FuentesFelipe

@FuentesFelipe yes it is

But just for the record i ended up using darvincisec's approach.

gabcarneiro avatar Dec 28 '21 17:12 gabcarneiro

@gabcarneiro This anti frida protection works for me on an ARM (root), x86_64 (emulator) and on an ARM64 (non-root, with gadget) and it worked. But on an ARM64 root, absolutely nothing happened.

Did the darvincisec project work for you on all architectures?

FuentesFelipe avatar Dec 29 '21 11:12 FuentesFelipe

@FuentesFelipe please share prebuilt apk of this repo if you have . Thanks

apkunpacker avatar Dec 29 '21 11:12 apkunpacker

@FuentesFelipe im afraid i only tested on ARM64 with 2 different devices, the first one rooted with frida-server and the second one non rooted with frida-gadget

Edit: forgot to mention that both methods of injection have been detected by the darvinsec project

gabcarneiro avatar Jan 04 '22 16:01 gabcarneiro

Thanks @gabcarneiro. In my case, frida-server and frida-gadget were successfully detected on ARM64 root and non-root respectively with darvincisec project. It only fails on a root SM-A307G, ARM64, running Android 10!

FuentesFelipe avatar Jan 04 '22 18:01 FuentesFelipe

Hey everyone, sorry for not replying, I hadn't noticed that this repo was still active :) It's very likely that the method is outdated as I've not been maintaining the project.

muellerberndt avatar Mar 14 '22 09:03 muellerberndt